Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/DwESy_rS0-JmLEXcJxey7JIDt18.roa
File:                     DwESy_rS0-JmLEXcJxey7JIDt18.roa (raw, json)
Hash identifier:          XPBCAh/MPbH9uSr+o+8hAKW7E/boJBEzcE+A5b0eI14=
Subject key identifier:   0F:01:12:CB:FA:D2:D3:E2:66:2C:45:DC:27:17:B2:EC:92:03:B7:5F
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       3F
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/DwESy_rS0-JmLEXcJxey7JIDt18.roa
Signing time:             Wed 13 May 2026 01:52:24 +0000
ROA not before:           Wed 13 May 2026 01:52:24 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        61.124.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 14:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: May 13 01:52:24 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=0F0112CBFAD2D3E2662C45DC2717B2EC9203B75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:f0:7b:90:19:53:7f:22:57:3d:52:a1:cb:
                    54:f3:30:65:09:f3:35:71:e2:56:56:8e:af:45:b4:
                    07:7b:ed:8b:09:59:73:84:de:e1:a4:43:6d:df:54:
                    df:1a:3a:13:5b:02:62:da:c9:dc:13:44:92:0d:d3:
                    5e:28:dc:68:f1:fa:a3:ec:25:32:1f:7b:65:ee:59:
                    80:b5:9f:cd:61:cd:25:d2:c7:18:6c:68:63:07:14:
                    b4:82:69:79:90:ae:b2:c7:74:69:d5:ac:0b:d0:33:
                    a7:4e:b3:c6:50:22:34:ce:23:59:d9:4c:e7:07:39:
                    cf:92:0c:36:e7:2b:dd:36:9b:7b:bc:52:bc:ef:58:
                    6a:22:21:9e:a5:b0:fe:91:a6:d6:39:89:90:71:52:
                    1e:0b:e0:e6:bf:f0:d8:29:ef:42:e9:8c:55:52:6e:
                    68:ad:cb:a5:e1:b4:ea:8e:65:3e:a9:0a:25:d8:32:
                    e7:84:93:6d:a0:ee:46:91:8c:0c:96:9a:06:11:d6:
                    03:4d:88:7c:0b:87:f1:04:9b:0f:69:3e:4f:ed:f9:
                    ac:8f:43:22:5a:e2:4b:4d:6a:cc:b1:40:e7:22:32:
                    9c:cc:67:6e:36:c4:33:d5:12:7c:01:3b:37:95:13:
                    38:e1:e5:4c:2c:8a:a1:ce:d2:aa:e4:b5:85:0e:c4:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:01:12:CB:FA:D2:D3:E2:66:2C:45:DC:27:17:B2:EC:92:03:B7:5F
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/DwESy_rS0-JmLEXcJxey7JIDt18.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.124.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:ab:c6:0f:5a:77:02:99:6b:b1:22:e0:45:48:a6:df:00:
         bd:35:fd:da:ed:0d:fc:1d:d6:93:55:7a:a4:b8:da:95:a5:01:
         18:64:a3:29:b1:40:89:22:cf:5c:38:74:a9:8a:0d:69:13:25:
         58:aa:19:ef:f9:89:b7:73:b6:bd:2a:c8:e8:37:45:4c:37:65:
         a1:bb:5e:5c:7f:73:07:0e:a2:4e:38:80:ad:68:51:7d:12:b7:
         b9:1e:b5:7f:1a:3d:13:bb:7e:ba:c0:7a:9f:d8:32:a5:ad:cf:
         d6:04:34:8b:de:22:6a:ad:17:8e:b8:23:90:e4:ee:b6:78:4e:
         2e:b5:50:e8:9e:48:d0:10:a6:70:cc:f3:95:05:b9:c1:97:54:
         78:eb:1e:f5:e9:bc:ea:43:22:92:d2:86:d7:0b:cd:5f:39:b9:
         ac:cb:b8:df:f4:6e:08:92:c6:31:97:61:25:55:e3:dc:77:4f:
         4b:c9:e4:c6:a0:cf:4a:ae:2a:62:28:dd:b7:f2:7e:cb:89:98:
         21:ba:f5:a5:66:ff:38:97:ce:af:3d:7f:dd:01:0a:fc:21:4a:
         80:1c:17:e6:8c:7a:98:75:7d:f4:2e:12:5e:28:c9:bc:79:91:
         dc:d8:7e:4b:03:4e:08:9d:23:d0:5c:2a:55:24:7e:02:45:af:
         06:77:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:36:29 2026 by rpki-client